gpp-audit-compare

Compare CMP IDs, GPP strings, and cookie architectures across websites via Chrome Incognito postMessage pings.

Updated Feb 23, 2026
One-click install
npx skills add https://github.com/phillymedia/eng-ai-skills --skill gpp-audit-compare
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gpp-audit-compare
Source: https://github.com/phillymedia/eng-ai-skills/tree/main/.claude/skills/gpp-audit-compare
Command: npx skills add https://github.com/phillymedia/eng-ai-skills --skill gpp-audit-compare

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams validate and compare Global Privacy Platform (GPP) signals across multiple websites, revealing CMP providers, opt-out postures, MSPA fields, cookie architectures, and section data.

Core Features & Use Cases

  • Parallel GPP ping and section data collection across sites
  • CMP provider and US region detection, opt-out posture analysis, and MSPA field extraction
  • Cookie architecture mapping and banner state detection
  • Generate a structured, cross-site comparison report

Quick Start

Run the gpp-audit-compare against multiple sites to retrieve GPP ping, section data, and cookie signals in parallel.

Frequently Asked Questions about gpp-audit-compare

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit and compare GPP signals across multiple websites?

To audit and compare GPP signals across multiple websites, you can run a parallel Chrome Incognito postMessage ping to retrieve CMP IDs, USNAT section data, and cookie architectures. This generates a structured cross-site comparison report detailing opt-out postures and MSPA fields.

What is a GPP string and how do I check its opt-out posture?

A GPP string encodes Global Privacy Platform signals, including USNAT and MSPA opt-out fields. You can check its posture by performing a postMessage ping to collect and parse the section data, revealing the site's consent state and provider configuration.

How do I detect which CMP provider a website is using?

You can detect which CMP provider a website is using by executing a Chrome Incognito postMessage ping to collect the site's GPP status and section data. The parsed signals reveal the specific CMP ID alongside the site's cookie architecture.

Can I extract MSPA fields and cookie architectures for USNAT compliance checks?

Yes, you can extract MSPA fields and cookie architectures for USNAT compliance checks by applying a GPP signal audit to a set of URLs. This process collects parsed section data, cookie names, and banner states for cross-site comparison.

Does this GPP signal audit work with multiple URLs in parallel?

Yes, this GPP signal audit works with multiple URLs in parallel, collecting postMessage ping responses and USNAT section data simultaneously. It applies to a set of domains to compare CMP IDs, opt-out fields, and cookie architectures efficiently.

What is the best way to compare cross-site privacy banner states and consent configurations?

The best way to compare cross-site privacy banner states and consent configurations is to run a parallel GPP signal audit across target URLs. This collects CMP provider data, parsed GPP strings, and cookie names into a concise cross-site comparison report.